Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: C5YrQg+22MOABJt7PnQwhJIuXUY3FPxopV84577xpaw=
Subject key identifier: C7:AE:99:56:69:AD:75:F7:D4:E5:2E:75:F8:15:64:99:84:8D:9F:07
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 019922C30C560123D12B2E223887162F2B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 0BE5
Signing time: Sun 07 Sep 2025 06:00:31 +0000
Manifest this update: Sun 07 Sep 2025 06:00:31 +0000
Manifest next update: Mon 08 Sep 2025 06:00:31 +0000
Files and hashes: 1: FXCR9Lc6KgRx_HPpZhjXnE6ILJY.roa (hash: TawwcEelbsmmDw/jX+MvcIQud2NnCnis9eNEGbrjubs=)
2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: +KG2oxyJyyuGrAd0Ku8RyQWAx7aFSgkpApo8m01UwE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0c:56:01:23:d1:2b:2e:22:38:87:16:2f:2b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Sep 7 06:00:31 2025 GMT
Not After : Sep 8 06:00:31 2025 GMT
Subject: CN=c7ae995669ad75f7d4e52e75f8156499848d9f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:59:4a:ea:03:d3:e1:2a:da:e1:59:50:e3:
b5:27:20:af:a3:70:5e:d5:38:1c:00:83:67:fd:54:
01:87:1c:0b:34:41:90:ea:7e:64:8b:c1:41:f1:60:
45:9d:29:2c:88:d1:3a:29:5c:58:48:c0:6e:d9:98:
48:19:ca:96:0c:82:ca:d6:a6:3a:8e:45:c8:1e:28:
b2:4e:4c:5f:b6:e1:90:67:91:4d:e0:ea:bc:e9:4c:
2e:3a:d8:39:95:77:51:a5:c2:24:03:93:95:8a:28:
44:01:0d:4f:50:c7:63:54:2c:0c:4f:ad:bc:36:cb:
bd:b9:85:c5:1f:6b:ce:78:2c:2a:9a:f7:3c:b7:f8:
17:17:90:4d:e2:05:95:79:77:06:02:ca:1b:e5:04:
70:cd:84:c4:da:3e:c2:b2:5b:68:b7:1a:11:a0:71:
09:58:5e:96:b4:e4:d7:2d:f6:ec:59:e1:ca:a9:da:
95:b6:1a:80:9a:3e:20:06:eb:d1:3f:98:cc:8f:69:
55:84:30:60:fc:2b:e1:ce:42:44:34:50:c0:09:34:
63:1f:7a:45:ef:74:f0:f9:cc:c5:91:aa:e4:14:92:
6a:c0:a3:a8:90:5b:5b:1b:b8:18:83:b2:62:4c:78:
df:d1:e9:98:70:ac:ac:d9:8a:45:cb:6c:72:f2:11:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AE:99:56:69:AD:75:F7:D4:E5:2E:75:F8:15:64:99:84:8D:9F:07
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ab:5d:61:54:52:9f:7d:b7:f9:75:02:8c:b9:15:e5:b9:05:
db:92:6f:9e:49:ea:72:c4:de:8d:f6:85:8c:a9:f1:f2:27:05:
21:c4:18:10:49:2e:f7:ff:3f:83:8a:d5:4d:d3:dc:d5:c2:1e:
7e:64:8c:22:22:33:1b:90:d3:6d:ab:7d:b6:92:61:da:bc:af:
95:28:29:b2:2c:a5:06:f0:7c:f3:b6:c0:23:1b:f2:9f:32:b4:
3e:e9:22:92:07:76:42:c4:af:a0:03:07:33:f4:c3:00:aa:d4:
ad:88:01:12:f4:33:83:7d:fe:32:c7:7c:f0:0d:25:ae:a4:ef:
dc:63:01:e4:9e:58:12:de:06:b4:a9:81:c0:02:ac:30:37:e5:
57:e7:c1:8b:e0:33:e4:9c:94:b2:eb:23:06:25:f2:b6:75:1e:
bd:67:e5:4f:b3:55:8d:dc:57:b5:ab:22:de:59:d2:b4:8c:c9:
f1:fb:bf:d0:fb:b4:47:2a:e9:d8:8b:d2:6e:21:8d:ba:cf:57:
f9:61:70:21:47:4d:eb:0d:82:eb:f0:1e:30:05:8a:ae:63:1f:
dd:1d:06:e1:cf:dd:f5:7e:19:74:5f:f1:6c:1f:56:64:2c:45:
ab:55:08:c6:55:f0:82:07:99:6e:17:9a:57:0d:e3:f1:ea:12:
dd:bc:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:40 2025 by rpki-client